if you don't want your folder open to the public and don't want set a password, we suggest you may set your folder hidden right and if your client wan access this folder and he/she must type the correct path... e.g. http://file.yourdomain.com/apple